FÉTIS Group & SECOM Engineering Listed by anubis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

FÉTIS Group & SECOM Engineering was listed by the ransomware group anubis on June 11, 2026. The listing states that internal files were exfiltrated during a ransomware attack on the engineering company. No confirmed count of affected individuals or records has been made public, and the organisation has not issued a detailed statement on the incident. The precise scope of the intrusion remains undisclosed. Available information is limited to the group’s claim of data exfiltration and the general description of the victim as an engineering firm holding financial records, project details and personal information.

What happened

The incident came to light through a listing on the anubis leak site on June 11, 2026. The entry asserts that files were taken from FÉTIS Group & SECOM Engineering in the course of a ransomware operation. No independent confirmation of the volume of data, the encryption status of systems, or the timeline of the attack has been released. The number of individuals whose information may be involved is not known.

Inside anubis

Anubis is a ransomware operation that follows the double-extortion model common among current groups. It typically encrypts victim systems and then publishes samples of stolen data on a dedicated leak site when ransom demands are not met. The group’s listings function as public claims rather than verified disclosures; independent verification of each entry is often absent. Similar actors have previously targeted mid-sized industrial and engineering firms, though specific tactics used against any single victim are rarely confirmed beyond the initial announcement.

Who is FÉTIS Group & SECOM Engineering?

FÉTIS Group & SECOM Engineering operates in the engineering sector, where companies routinely manage detailed project documentation, client specifications, financial ledgers and employee records. Such organisations frequently exchange data with contractors, regulators and supply-chain partners. A compromise at this type of firm can therefore touch both corporate operational information and personal data belonging to staff or clients.

What was likely exposed

The listing describes internal files taken during the ransomware attack. The reported summary refers to financial records, project details and personal information. No inventory of specific file types, record counts or data fields has been published. Organisations of this kind commonly store employee identifiers, contract details and technical drawings; whether those categories were among the exfiltrated material remains unconfirmed.

Why it matters

Engineering firms hold information that can reveal operational practices, client relationships and personnel details. If personal data is involved, affected individuals may face risks of identity misuse or targeted fraud. For the company, exposure of project files can affect competitive standing and contractual obligations. The absence of a confirmed record count means the full extent of potential harm cannot yet be assessed.

What to do if you're exposed

Individuals who believe their information may be affected should monitor bank and credit accounts for unusual activity and consider placing fraud alerts with credit agencies. Changing passwords for any accounts linked to the organisation is a basic precaution. Readers can run a free exposure scan of their email address against known breach data to check whether their details appear in public listings from this or other incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.